Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2741423CD8D111EF8931D3BA762E951A.roa
File: 2741423CD8D111EF8931D3BA762E951A.roa (raw, json)
Hash identifier: ByaZFCB4sIpV1+3aUyVY9AZv4JtEOnJzG8TOgpKeuyQ=
Subject key identifier: B0:35:21:65:CE:9B:65:03:70:02:25:92:BB:A8:5F:2D:36:D6:C5:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2741423CD8D111EF8931D3BA762E951A.roa
Signing time: Wed 22 Jan 2025 14:57:09 +0000
ROA not before: Wed 22 Jan 2025 14:57:05 +0000
ROA not after: Tue 01 Apr 2025 14:57:05 +0000
asID: 138915
IP address blocks: 154.93.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81848 (0x13fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:57:05 2025 GMT
Not After : Apr 1 14:57:05 2025 GMT
Subject: CN=67910745-8e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:40:d9:40:ee:72:09:c2:0a:93:fb:c5:e8:
2e:f8:3a:e3:d9:e4:23:02:5c:c7:d9:03:05:5f:ed:
2f:89:a2:6f:4f:ff:74:fa:61:f0:24:19:50:c6:b6:
d5:34:3d:6f:09:36:e7:88:0a:e6:7c:26:ab:ce:45:
18:3c:89:c3:a0:6f:57:9c:34:c0:17:03:17:70:69:
0f:fc:78:aa:cb:12:58:d4:00:9b:a4:63:ab:2e:9f:
bf:17:4e:08:10:a8:79:40:cc:40:35:df:f4:f8:5c:
96:49:31:97:f0:86:ad:1e:46:8b:1e:9a:b7:5a:5b:
9b:be:cb:b6:28:01:9e:01:90:d7:92:2e:67:66:16:
ab:0b:4c:2b:df:42:39:81:b2:23:e5:c8:ec:ba:eb:
35:d5:67:77:34:58:f3:71:5d:04:16:54:23:80:3e:
18:bc:2f:7d:67:77:a2:df:db:61:cf:74:50:51:75:
bd:af:3b:31:5f:a6:34:84:45:9f:9d:12:f5:a3:eb:
e4:95:15:7a:ea:7f:e6:95:96:69:d3:65:ee:63:5e:
e7:0e:43:77:7c:20:1e:6e:de:a1:f3:b0:5f:69:be:
22:9e:18:22:69:20:20:07:48:d8:6d:63:99:b0:1a:
0d:25:3d:a7:67:fb:4c:bd:ce:52:8a:43:bb:21:fb:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:21:65:CE:9B:65:03:70:02:25:92:BB:A8:5F:2D:36:D6:C5:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2741423CD8D111EF8931D3BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.97.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cf:cb:25:4d:c6:e3:09:01:86:a0:8c:24:8e:cb:32:a2:f6:
12:45:95:7e:9e:e1:96:73:28:44:23:fe:ae:d1:6f:06:3f:83:
06:4d:4a:41:7d:5b:1d:b0:c0:6c:27:90:cd:ef:59:7e:5a:61:
5b:40:93:bd:cf:43:ee:97:97:9a:a9:e4:ca:b0:5c:18:99:f0:
6c:1a:f5:e9:02:ea:48:aa:b5:4c:42:24:fc:12:7a:3f:62:21:
b3:58:be:e1:b7:91:9e:40:5c:5d:71:17:1c:cf:49:d1:e4:38:
b5:ac:5a:41:91:14:c8:a6:7c:27:51:1f:e0:ca:1f:5c:29:d9:
f0:10:63:64:62:93:1d:ca:05:19:db:bf:aa:75:5d:ae:1e:8b:
2c:13:55:0c:36:97:45:9e:91:ed:d8:3b:ff:32:53:58:f6:15:
0d:4d:69:ef:42:89:9c:50:9e:b2:40:cd:31:2e:fd:49:6c:dd:
69:35:f4:34:2f:7f:5e:dd:e8:3e:44:e0:84:cd:1d:0d:b9:51:
20:cf:7b:f2:f1:f7:75:ef:b6:62:a2:60:8f:34:a6:49:e6:1b:
35:5f:fe:11:a4:aa:96:f6:e1:4b:f3:5b:a6:70:b3:37:cc:96:
55:d4:d5:e0:92:6c:49:56:e5:20:8b:bb:14:8d:0f:83:2a:46:
16:52:97:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT+4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTQ1NzA1WhcNMjUwNDAxMTQ1NzA1WjAYMRYw
FAYDVQQDEw02NzkxMDc0NS04ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzHVA2UDucgnCCpP7xegu+Drj2eQjAlzH2QMFX+0viaJvT/90+mHwJBlQ
xrbVND1vCTbniArmfCarzkUYPInDoG9XnDTAFwMXcGkP/HiqyxJY1ACbpGOrLp+/
F04IEKh5QMxANd/0+FyWSTGX8IatHkaLHpq3Wlubvsu2KAGeAZDXki5nZharC0wr
30I5gbIj5cjsuus11Wd3NFjzcV0EFlQjgD4YvC99Z3ei39thz3RQUXW9rzsxX6Y0
hEWfnRL1o+vklRV66n/mlZZp02XuY17nDkN3fCAebt6h87Bfab4inhgiaSAgB0jY
bWOZsBoNJT2nZ/tMvc5SikO7IfuLkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLA1
IWXOm2UDcAIlkruoXy021sWYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNzQxNDIzQ0Q4RDExMUVGODkzMUQzQkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1hMA0GCSqGSIb3DQEB
CwUAA4IBAQAFz8slTcbjCQGGoIwkjssyovYSRZV+nuGWcyhEI/6u0W8GP4MGTUpB
fVsdsMBsJ5DN71l+WmFbQJO9z0Pul5eaqeTKsFwYmfBsGvXpAupIqrVMQiT8Eno/
YiGzWL7ht5GeQFxdcRccz0nR5Di1rFpBkRTIpnwnUR/gyh9cKdnwEGNkYpMdygUZ
27+qdV2uHossE1UMNpdFnpHt2Dv/MlNY9hUNTWnvQomcUJ6yQM0xLv1JbN1pNfQ0
L39e3eg+ROCEzR0NuVEgz3vy8fd177ZiomCPNKZJ5hs1X/4RpKqW9uFL81umcLM3
zJZV1NXgkmxJVuUgi7sUjQ+DKkYWUpcZ
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:19:55 2025 by rpki-client